$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft File: sh-7koheKG95wUMeEHecbxfbntc.mft (raw, json) Hash identifier: XP9/jIb0OPkgEnioCYX0I86AN//KddNYM7J4mpmODpU= Subject key identifier: 72:23:53:B5:AA:9F:7D:A4:9E:71:CB:04:14:11:A2:73:F4:F4:01:F8 Authority key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 Certificate issuer: /CN=A9114747/serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft Manifest number: 0F Signing time: Mon 31 Aug 2026 09:34:05 +0000 Manifest this update: Mon 31 Aug 2026 09:34:04 +0000 Manifest next update: Mon 07 Sep 2026 09:34:04 +0000 Files and hashes: 1: sh-7koheKG95wUMeEHecbxfbntc.crl (hash: 8x7+cWlbC8zm25O5f1rWuBlcfQ+Jeu3gvxvLfneqk38=) 2: E855FB7A980111F1937686323211F970.roa (hash: 6NC9VsA0PjYcqqS7+rb/opvcfAVHW6RSMyp3OIjHA6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Validity Not Before: Aug 31 09:34:04 2026 GMT Not After : Sep 7 09:34:04 2026 GMT Subject: CN=6a954a8c-fd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:66:be:ab:2a:fe:13:3f:fc:16:06:d0:b9: 3e:d2:29:17:d0:ed:96:35:c4:b9:c5:7f:13:aa:9a: df:72:0f:01:69:70:e1:a5:39:c8:2c:68:8e:f4:de: 68:9f:9c:75:a8:09:78:eb:a8:70:50:3c:28:f4:76: 3f:2b:6d:01:c2:9c:1e:b5:67:28:48:c0:3b:9b:c9: 87:61:0f:f4:be:8b:f9:51:b8:2b:aa:6f:a6:91:53: 6e:e0:71:38:07:f2:e1:54:49:0c:b3:6c:3f:06:76: 90:05:9f:fd:42:2e:29:16:52:9b:26:44:15:bd:ec: 31:41:24:cd:7d:0f:96:82:d4:b3:78:a4:00:09:1c: 2e:48:49:41:b1:a1:15:aa:be:e7:79:19:33:3f:d7: 3b:91:d4:55:a9:52:33:82:b2:ea:68:07:8d:f5:80: ba:5a:21:44:3f:2f:24:a6:53:12:63:e3:9f:0a:ab: b8:68:21:92:3a:18:df:d3:57:8a:84:79:00:a9:78: ca:12:61:4d:bc:51:f9:b8:ea:43:f2:eb:0e:59:78: 67:35:b2:c4:d9:cd:ec:c4:6b:90:16:dd:3f:97:b2: e9:ff:bf:82:77:0d:8d:4c:22:a1:8b:be:b1:59:80: a1:22:d2:ad:61:81:b9:23:78:70:47:04:7c:9b:e9: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:53:B5:AA:9F:7D:A4:9E:71:CB:04:14:11:A2:73:F4:F4:01:F8 X509v3 Authority Key Identifier: keyid:B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:59:28:6e:ba:7f:73:ee:47:b1:40:f8:2e:01:dc:f5:6d:b9: 48:b4:76:78:69:08:37:a9:66:15:7f:53:ee:27:aa:e2:44:a1: 6f:e8:b5:ff:b4:01:3e:07:98:dc:4d:ca:9a:df:9e:94:04:19: fa:a8:4c:57:db:88:94:97:2b:68:9a:e8:74:43:36:b5:a9:d0: a6:df:0d:c9:ad:7c:96:31:ea:a8:83:46:4e:77:a5:22:85:15: 45:27:60:b7:50:25:e1:b0:39:03:b3:bf:b2:59:1f:72:59:71: 8d:60:0f:94:9f:5c:f2:eb:8d:1f:c3:7b:ec:89:52:d4:02:a0: 4d:cd:7c:f7:59:63:f4:08:a9:24:e3:4f:db:1c:4c:60:1c:bf: 64:aa:c2:f0:6c:75:17:d1:76:00:c3:2a:e4:8d:b9:25:0f:cf: 29:a9:76:51:b8:03:8e:4d:8b:5c:24:8f:2a:52:0d:51:d6:b1: e8:ba:0c:89:ba:55:62:6d:34:fc:cd:9e:9d:0c:99:c7:81:9a: 04:c0:c7:a0:5a:52:52:1f:c7:1e:fd:65:ec:43:97:84:66:2d: 42:0a:e8:be:76:a6:a3:7a:55:86:eb:39:90:50:28:00:aa:e6: 2b:dc:85:d4:15:d6:4f:2b:14:aa:0a:67:c0:7a:a3:00:37:a1: 94:08:d5:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDc0NzExMC8GA1UEBRMoQjIxRkJCOTI4ODVFMjg2Rjc5QzE0MzFFMTA3NzlDNkYx N0RCOUVENzAeFw0yNjA4MzEwOTM0MDRaFw0yNjA5MDcwOTM0MDRaMBgxFjAUBgNV BAMTDTZhOTU0YThjLWZkMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCL0ma+qyr+Ez/8FgbQuT7SKRfQ7ZY1xLnFfxOqmt9yDwFpcOGlOcgsaI703mif nHWoCXjrqHBQPCj0dj8rbQHCnB61ZyhIwDubyYdhD/S+i/lRuCuqb6aRU27gcTgH 8uFUSQyzbD8GdpAFn/1CLikWUpsmRBW97DFBJM19D5aC1LN4pAAJHC5ISUGxoRWq vud5GTM/1zuR1FWpUjOCsupoB431gLpaIUQ/LySmUxJj458Kq7hoIZI6GN/TV4qE eQCpeMoSYU28Ufm46kPy6w5ZeGc1ssTZzezEa5AW3T+Xsun/v4J3DY1MIqGLvrFZ gKEi0q1hgbkjeHBHBHyb6UfxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUciNTtaqf faSeccsEFBGic/T0AfgwHwYDVR0jBBgwFoAUsh+7koheKG95wUMeEHecbxfbntcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NzQ3LzFDNDkwNDZBOTgw MDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5NXdVTWVFSGVjYnhmYm50 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2gtN2tvaGVLRzk1d1VNZUVIZWNieGZibnRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NzQ3LzFDNDkwNDZBOTgwMDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5 NXdVTWVFSGVjYnhmYm50Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCCWShuun9z7kexQPguAdz1bblItHZ4aQg3qWYVf1PuJ6riRKFv6LX/tAE+B5jc Tcqa356UBBn6qExX24iUlytomuh0Qza1qdCm3w3JrXyWMeqog0ZOd6UihRVFJ2C3 UCXhsDkDs7+yWR9yWXGNYA+Un1zy640fw3vsiVLUAqBNzXz3WWP0CKkk40/bHExg HL9kqsLwbHUX0XYAwyrkjbklD88pqXZRuAOOTYtcJI8qUg1R1rHougyJulVibTT8 zZ6dDJnHgZoEwMegWlJSH8ce/WXsQ5eEZi1CCui+dqajelWG6zmQUCgAquYr3IXU FdZPKxSqCmfAeqMAN6GUCNXX -----END CERTIFICATE-----Generated at Tue Sep 1 03:20:23 2026 by rpki-client